← Back to plugin index

Has Suitable Airlock 2FA Device
Description

Condition that is fulfilled if the user has at least one Airlock 2FA device that is active and capable of at least one of the allowed factors.

The allowed authentication factors are determined as the common factors between:

  1. The factors configured here. These factors are the same for all users.
  2. The factors that are enabled for the user in the Futurae administration service.

If bypass mode is not enabled in the Airlock 2FA settings, this condition will not be satisfied for users for which the Futurae bypass mode is enabled. If bypass mode is enabled in the Airlock 2FA settings, this condition will be satisfied for all users for which the Futurae bypass mode is enabled.

Type name
Airlock2FAHasDeviceCondition
Class
com.airlock.iam.flow.shared.application.configuration.condition.Airlock2FAHasDeviceConditionConfig
May be used by
Default Disable Cronto Device Flow Default Disable Cronto Device Flow FIDO Credential Selection Step FIDO Credential Selection Step Default Remember-Me Device Deletion Flow Default Remember-Me Device Deletion Flow Account Link Removal Initiation Step Account Link Removal Initiation Step Password Reset Step Password Reset Step Secret Questions Identity Verification Step Secret Questions Identity Verification Step Flow Condition-based OAuth 2.0 Scope Condition Account Linking Lists Self Services Account Linking Lists Self Services Email Identity Verification Step Email Identity Verification Step Cronto Authentication Step Cronto Authentication Step User Identification Step User Identification Step Rename Cronto Device Step Rename Cronto Device Step Public Self-Service OATH OTP Approval Step Public Self-Service OATH OTP Approval Step Airlock 2FA Mobile Only Authentication Step Airlock 2FA Mobile Only Authentication Step User Data Edit Step User Data Edit Step Device Token List Device Token List Stop User Representation Step Stop User Representation Step SSI Passwordless Authentication Step SSI Passwordless Authentication Step OAuth 2.0 Session List OAuth 2.0 Session List Set Context Data Step Set Context Data Step SSI Authentication Step SSI Authentication Step Enable FIDO Credential Initiation Step Enable FIDO Credential Initiation Step User Data Registration Step User Data Registration Step Missing Account Link Step Password Repository Mapping OAuth 2.0 Consent Step Device Token Registration Step Device Token Registration Step OAuth 2.0 Consents Delete Initiation Step OAuth 2.0 Consents Delete Initiation Step User Identification with FIDO Authentication Step User Identification with FIDO Authentication Step OTP Check via RADIUS Step OTP Check via RADIUS Step mTAN Token Edit Step mTAN Token Edit Step Remember-Me Reset Step Remember-Me Reset Step Airlock 2FA Authentication Step Airlock 2FA Authentication Step Cronto Device Reset Step Cronto Device Reset Step Terms Of Services Step Terms Of Services Step Password-only Authentication Step Password-only Authentication Step Flow Continuation Step Flow Continuation Step Mandatory Password Change Step Cronto Letter Order Step Cronto Letter Order Step Red Flag Raising Step Red Flag Raising Step Red Flag Raising Step Enable Cronto Device Initiation Step Enable Cronto Device Initiation Step Delete FIDO Credential Initiation Step Delete FIDO Credential Initiation Step OAuth 2.0 Consent List OAuth 2.0 Consent List Airlock 2FA Delete Devices Step Airlock 2FA Delete Devices Step OAuth 2.0 SSO Step OAuth 2.0 SSO Step Selection Step for Public Self-Service Selection Step for Public Self-Service OAuth 2.0 Client Registration Step OAuth 2.0 Client Registration Step Airlock 2FA Public Self-Service Approval Step Airlock 2FA Public Self-Service Approval Step Remember-Me Device List Remember-Me Device List Selection Step for User Self-Registration Selection Step for User Self-Registration User Identification Step (Public Self-Service) User Identification Step (Public Self-Service) Selection Option For Self-Service Airlock 2FA Usernameless Authentication Step Airlock 2FA Usernameless Authentication Step Start User Representation Step Start User Representation Step Cronto Activation Step Cronto Activation Step Airlock 2FA Activation Step (with additional Activation) Airlock 2FA Activation Step (with additional Activation) Complete Migration Step Complete Migration Step Set Authentication Method Step Set Authentication Method Step Selection Option For Public Self-Service SSI Verification Step SSI Verification Step OAuth 2.0 Consent Grant Initiation Step OAuth 2.0 Consent Grant Initiation Step SMS Identity Verification Step SMS Identity Verification Step Unlock User Step (Public Self-Service) Unlock User Step (Public Self-Service) Default Enable Cronto Push Flow Default Enable Cronto Push Flow Email Change Verification Step Email Change Verification Step Default mTAN Deletion Flow Email OTP Transaction Approval Step Email OTP Transaction Approval Step Email OTP Authentication Step Email OTP Authentication Step Device Token Identity Verification Step Device Token Identity Verification Step Delete mTAN Number Initiation Step Delete mTAN Number Initiation Step Remember-Me Token Generating Step Remember-Me Token Generating Step Cronto Device List Cronto Device List Airlock 2FA Activation Letter Order Step Airlock 2FA Activation Letter Order Step Airlock 2FA Device Deletion Initiation Step Airlock 2FA Device Deletion Initiation Step Cronto Public Self-Service Approval Step Cronto Public Self-Service Approval Step Scriptable Step Scriptable Step Default mTAN Token Registration Flow Username Password Authentication Step Username Password Authentication Step Selection Step for Self-Service Selection Step for Self-Service Risk Assessment Step Risk Assessment Step FIDO Credential Display Name Change Step FIDO Credential Display Name Change Step mTAN Number List mTAN Number List Role-based Tag Acquisition Step Role-based Tag Acquisition Step Transaction Approval Parameter Step Transaction Approval Parameter Step Airlock 2FA Recovery Trusted Session Binding Step Airlock 2FA Recovery Trusted Session Binding Step Select mTAN Token Step Select mTAN Token Step FIDO Credential List FIDO Credential List Device Token Authentication Step Device Token Authentication Step Logical NOT Matrix Public Self-Service Approval Step Matrix Public Self-Service Approval Step Voluntary Password Change Step Voluntary Password Change Step Username Generation Step Username Generation Step Login From New Device Step Login From New Device Step Default Disable Cronto Push Flow Default Disable Cronto Push Flow User Lock Step User Lock Step Acknowledge Message Step Acknowledge Message Step Password Change Self-Service Step Password Change Self-Service Step Default mTAN Token Edit Flow Default mTAN Token Edit Flow Selection Option For User Self-Registration Abort Step Abort Step User Role Assignment Step User Role Assignment Step Delete Cronto Device Initiation Step Delete Cronto Device Initiation Step Custom Protected Self-Service Flow Custom Protected Self-Service Flow OIDC Flow Condition To ACR Value Mapping Vasco OTP Public Self-Service Approval Step Vasco OTP Public Self-Service Approval Step Delete All Device Tokens Step Delete All Device Tokens Step Enable Cronto Push Initiation Step Enable Cronto Push Initiation Step mTAN Transaction Approval Step mTAN Transaction Approval Step Cronto Device Selection Step Cronto Device Selection Step Matrix Self-Service Approval Step Matrix Self-Service Approval Step mTAN Authentication Step mTAN Authentication Step FIDO Transaction Approval Step FIDO Transaction Approval Step Default Enable Cronto Device Flow Default Enable Cronto Device Flow Representation SSO Ticket Identifying Step Representation SSO Ticket Identifying Step OATH OTP Authentication Step OATH OTP Authentication Step Default FIDO Credential Removal Flow Email Verification Step Email Verification Step Default OAuth 2.0 Consent Grant Flow Default OAuth 2.0 Consent Grant Flow Default Account Link Linking Flow Default Account Link Linking Flow Email Notification Step Email Notification Step Delete OAuth 2.0 Session Initiation Step Delete OAuth 2.0 Session Initiation Step Never Migrate Step Never Migrate Step Default Cronto Device Renaming Flow Default Cronto Device Renaming Flow mTAN Public Self-Service Approval Step mTAN Public Self-Service Approval Step FIDO Passwordless Authentication Step FIDO Passwordless Authentication Step Failure Step Failure Step Set Authentication Method Migration Step Set Authentication Method Migration Step SSO Ticket Authentication Step SSO Ticket Authentication Step Remember-Me User Identifying Step Remember-Me User Identifying Step OAuth 2.0 Session Reset Step OAuth 2.0 Session Reset Step Username Password with FIDO Authentication Step Username Password with FIDO Authentication Step Default OAuth 2.0 Consent Deny Flow Default OAuth 2.0 Consent Deny Flow Default Enable FIDO Credential Flow Default Enable FIDO Credential Flow mTAN Verification Step mTAN Verification Step Logical AND User Identification By Data Step (Public Self-Service) User Identification By Data Step (Public Self-Service) Vasco OTP Device Activation Vasco OTP Device Activation Advanced Migration Selection Option On Behalf Login Identity Propagation Logical OR Legacy ID Propagation Adapter SSI Issuance Step SSI Issuance Step Airlock 2FA Device List Airlock 2FA Device List Apply Changes Step Apply Changes Step Migration Selection Step Migration Selection Step Migration Selection Step Tag Removal Step Tag Removal Step Password Letter Order Step Password Letter Order Step Airlock 2FA Activation Trusted Session Binding Step Airlock 2FA Activation Trusted Session Binding Step Target URI ID Propagator Application Portal Target FIDO Public Self-Service Approval Step FIDO Public Self-Service Approval Step Flow Continuation Token Consumption Step Flow Continuation Token Consumption Step Condition-based Role Provider Airlock 2FA Activation Step Airlock 2FA Activation Step SAML 2.0 SP User Identifying Step SAML 2.0 SP User Identifying Step Default FIDO Credential Display Name Change Flow Default FIDO Credential Display Name Change Flow CrontoSign Swiss Push Activation Step CrontoSign Swiss Push Activation Step Airlock 2FA Device Edit Initiation Step Airlock 2FA Device Edit Initiation Step Cronto Approval Stealth Step Cronto Approval Stealth Step User Persisting Step User Persisting Step Flow Condition To Authentication Context Mapping Set Password Step Set Password Step mTAN Self-Service Approval Step mTAN Self-Service Approval Step FIDO Authentication Step FIDO Authentication Step Airlock 2FA Transaction Approval Step Airlock 2FA Transaction Approval Step Phone Number Verification Step Phone Number Verification Step Default Account Link Removal Flow Default Account Link Removal Flow Target Applications and Authentication Legacy mTAN Registration Flow Legacy mTAN Registration Flow Realm Assignment Step Realm Assignment Step FIDO Self-Service Approval Step FIDO Self-Service Approval Step OAuth 2.0 Client Persisting Step OAuth 2.0 Client Persisting Step Airlock 2FA Device Edit Step Airlock 2FA Device Edit Step Disable Cronto Push Initiation Step Disable Cronto Push Initiation Step Disable Cronto Device Initiation Step Disable Cronto Device Initiation Step HTTP Basic Authentication Step HTTP Basic Authentication Step Delete Remember-Me Device Initiation Step Delete Remember-Me Device Initiation Step Default Cronto Device Removal Flow SSI Self-Registration Issuance Step SSI Self-Registration Issuance Step OAuth 2.0 Consent Deny Initiation Step OAuth 2.0 Consent Deny Initiation Step Generic ID Propagator Default OAuth 2.0 Consents Delete Flow Default OAuth 2.0 Consents Delete Flow Disable FIDO Credential Initiation Step Disable FIDO Credential Initiation Step Account Link Linking Initiation Step Account Link Linking Initiation Step Vasco OTP Authentication Step Vasco OTP Authentication Step User Unlock Step (Self-Registration) User Unlock Step (Self-Registration) OATH OTP Activation Step OATH OTP Activation Step Selection Step Selection Step Default Disable FIDO Credential Flow Default Disable FIDO Credential Flow Certificate Credential Extraction Step Certificate Credential Extraction Step Selection Option Cronto Transaction Approval Step Cronto Transaction Approval Step Vasco OTP Self-Service Approval Step Vasco OTP Self-Service Approval Step Cronto Self-Service Approval Step Cronto Self-Service Approval Step Matrix Checking Step Matrix Checking Step Send Email Link Step Send Email Link Step Kerberos Authentication Step Kerberos Authentication Step No Operation Step No Operation Step Airlock 2FA Self-Service Approval Step Airlock 2FA Self-Service Approval Step Conditional Value Map Provider Legacy Email OTP Authentication Step Legacy Email OTP Authentication Step FIDO Registration Step FIDO Registration Step Default OAuth 2.0 Session Deletion Flow Default OAuth 2.0 Session Deletion Flow Secret Questions Provisioning Step Secret Questions Provisioning Step mTAN Token Registration Step mTAN Token Registration Step User Identification By Data Step User Identification By Data Step
License-Tags
Airlock2FA
Properties
Factors (factors)
Description

List of all enabled factors. The condition is fulfilled, if the user has at least one device that is capable of at least one of the factors listed here.

Available factors:

  • One-Touch: a push message is sent to the user's mobile app, where it must be approved. This is an online factor.
  • Online QR Code: a QR code is displayed in the browser, which has to be scanned by a mobile app and approved there. This is an online factor.
  • Passcode: the device (mobile app or hardware token) generates a time-dependent code (OTP) that has to be entered manually. This is an offline factor.
  • Offline QR Code: a QR code is displayed which has to be scanned by a mobile app or hardware token. The device displays a code (OTP) that must be entered manually. This is an offline factor.

Attributes
String-List
Optional
Default value
[One-Touch, Online QR Code, Passcode, Offline QR Code]
Airlock 2FA Settings (airlock2faSettings)
Description

Settings of Airlock 2FA.

It is recommended to use the same settings everywhere. Otherwise, behaviour of the condition could seem inconsistent.

Attributes
Plugin-Link
Mandatory
Assignable plugins
Airlock 2FA Settings
Respect Cooldown Period (respectCooldown)
Description

Whether to ignore Cooldown information.

If disabled, the step ignores the "Cooldown Period" for new devices configured in the "Airlock 2FA Settings". This is typically used for authentication steps that protect low-risk applications, such as a portal page, which can also be accessed using devices in cooldown.

If no "Cooldown Period" is defined, enabling this property has no effect.

Attributes
Boolean
Optional
Default value
true
YAML Template (with default values) 

type: Airlock2FAHasDeviceCondition
id: Airlock2FAHasDeviceCondition-xxxxxx
displayName: 
comment: 
properties:
  airlock2faSettings:
  factors: [One-Touch, Online QR Code, Passcode, Offline QR Code]
  respectCooldown: true